GINC-APT-0345 · Tracked, unattributed

SOLAR SPIDER

Also Solar Spider.

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
6 sources carry it
Identifier
GINC-APT-0345 · solar-spider

What it is

SOLAR SPIDER’s phishing campaigns deliver the JSOutProx RAT to financial institutions across Africa, the Middle East, South Asia and Southeast Asia.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

CrowdStrike
Solar Spider

Targets

Sectors
Finance

Tools

The tools and malware families the sources tie to it.

  • CrossRat

Sources